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Abstract —This paper exploits the potential of physical layer 
security in massive multiple-input multiple-output (MIMO) aided 
two-tier heterogeneous networks (HetNets). We focus on the 
downlink secure transmission in the presence of multiple eaves¬ 
droppers. We first address the Impact of massive MIMO on the 
maximum receive power based user association. We then derive 
the tractable upper bound expressions for the secrecy outage 
probability of a HetNets user. We show that the implementation of 
massive MIMO significantly improves the secrecy performance, 
which indicates that physical layer security could be a promising 
solution for safeguarding massive MIMO HetNets. Furthermore, 
we show that the secrecy outage probability of HetNets user first 
degrades and then improves with increasing the density of PBSs. 

1. Introduction 

Security and privacy in 5G networks is of paramount im¬ 
portance HI, 111. Physical layer security has recently attracted 
much attention as a potential security solution at the phys¬ 
ical layer 0. Such security technique exploits propagation 
randomness to establish secret and avoids using ciphering 
keys. The EP7 Europe research project PHYLAWS lU focuses 
on the realistic implantation of physical layer security in the 
existing and future wireless networks. 

Research efforts on the physical layer security have been 
made by considering different aspects, such as antenna selec¬ 
tion a, cooperative jamming 0, and artificial noise Q, etc. 
In ||8], matched filter precoding and artificial noise generation 
was designed to secure downlink transmission in a multicell 
massive multiple-input multiple-output (MIMO) system in the 
presence of an eavesdropper. In 121, physical layer security 
has been investigated in a two-tier downlink HetNets, where 
the cooperative femtocells help macrocell achieve the optimal 
secrecy transmit beamforming. 

In 5G, massive multiple-input multiple-output (MIMO) and 
heterogeneous networks (HetNets) are two key enablers. Phys¬ 
ical layer security in massive MIMO enabled HetNets has 
not been conducted yet and is in its infancy. We believe that 
massive MIMO enabled HetNets is a new highly rewarding 
candidate for physical layer security due to the following 
factors; 

• Base station densities. In HetNets, different tiers have 
different base station densities, and small cells are de¬ 


ployed in a large scale to improve the spectrum efficiency. 
As such, the distance between the user and its serving 
base station is shorter, which in turn decreases the risk 
of information leakage. 

• Large antenna arrays. Base station with large antenna 
array provides large array gain for its legitimate user. As 
such, the transmit power level can be cut, and the received 
signal power at the eavesdropper is correspondingly re¬ 
duced, due to the fact that the eavesdropper cannot obtain 
the array gain. 

• Time division duplex. Massive MIMO is recommended 
to be applied in time division duplex (TDD) system, to 
save the pilot resources. In the TDD mode, base station 
estimates the uplink channel via uplink pilot signals from 
user, and obtains the downlink channel state information 
(CSI) based on the channel reciprocity, which means that 
there is no channel training in the downlink. As such, 
eavesdropper cannot easily estimate the eavesdropper’s 
channel during the downlink transmission. 

Motivated by the above, this paper considers physical layer 
security in the downlink iT-tier HetNets with massive MIMO, 
which to the best of our knowledge, has not been studied 
yet. Each macrocell base station (MBS) is equipped with 
large antenna arrays and uses linear zero-forcing beamforming 
(ZEBE) to communicate with dozens of single antenna users 
over the same time and frequency band. Each picocell base 
station (PBS) equipped with a single antenna serves one single 
antenna user for each transmission. We adopt a stochastic 
geometry approach to model the different tiers, where the 
locations of MBSs, PBSs and eavesdroppers are modelled fol¬ 
lowing independent homogeneous Poisson point processes. We 
first address the impact of massive MIMO on the maximum 
receive power based user association. We then derive the upper 
bound for the secrecy outage probability of a HetNets user, to 
show the benefits of massive MIMO. Our results confirms that 
using massive MIMO can significantly enhance the secrecy 
outage probability of the macrocell user. Eurthermore, the 
secrecy outage probability of the HetNets user first increases 
and then decreases with increasing the density of PBSs. 


II. System Model 

In the TDD two-tier HetNets consisting of macrocells and 
picocells, downlink transmission is considered in the presence 
of multiple eavesdroppers. Without loss of generality, we 
assume that the first tier represents the class of MBSs. The 
MBSs are located following a homogeneous Poisson point 
process (HPPP) <I>m with density Am, while the PBSs are 
located following an independent HPPP $p with density Ap. 
The eavesdroppers are located following an independent HPPP 
$E with density Ae. 

Massive MIMO is adopted in the macrocells M, where 
each 7V-antenna MBS simultaneously communicates with S 
users {N ^ S > 1), while each PBS and user are single¬ 
antenna nodes. Each MBS uses ZFBF to transmit S data 
streams with equal power assignment, such that users that 
act as potential malicious eavesdropper can only receive its 
information signals. We consider the perfect downlink CSI 
and the universal frequency reuse that all the tiers share the 
same bandwidth. All the channels undergo independent and 
identically distributed (i.i.d.) quasi-static Rayleigh fading. 

A. User Association 

We consider user association based on the maximum re¬ 
ceived power, where a user is associated with the BS that 
provides the maximum average received power. The average 
received power at a user that is connected with the MBS £ 
(£ G <I>m) is expressed as 

(|Af^,M|), (1) 

where Ga is the array gain. Pm is the MBS’s transmit power, 
T(|^^,m|) = l3\X(.,u\ i^ th® loss function, £3 is the 
frequency dependent constant value, is the distance, 

and ai is the path loss exponent. The array gain Ga of ZFBF 
transmission is N — S + 1 im. 

In the picocell, the long-term average received power at a 
user that is connected with the PBS j (j G <I>p) is expressed 
as 


P,,P =PpL(|X,-p|), (2) 

where Pp is the BBS’s transmit power and L(|A'_,p|) = 
P{\Xj^p\)~'^^ with distance |-Aj_p| and path loss exponent a 2 - 


B. Channel Model 


All the channels undergo the independent and identically 
distributed (i.i.d.) quasi-static Rayleigh fading. We assume that 
a typical user is located at the origin o. The receive signal- 
to-interference-plus-noise ratio (SINR) of a typical user at a 
random distance |2fo m| from its associated MBS is given by 


SINRm = 


^hoML{\XoM\) 
/i +52 


(3) 


where Ii = Jm,i + Is,i, Is,i = Pphj,pL {\Xj^p\), 

Im,i = ho,M ^ 

r {N — S' -f 1 , 1 ) is the small-scale fading channel power 
gain between the typical user and its associated MBS CD, 


hj^p ~ exp(l) and |2fj^p| are the small-scale fading interfering 
channel power gain and distance between the typical user and 
BS j in the picocell, respectively, he^M ~ T (S, 1) and 
are the equivalent small-scale fading interfering channel 
power gain and distance between the typical user and MBS 
£ G (except the serving BS respectively, 

and 6^ is the noise power. 

The SINR of a typical user at a random distance |2fo_p| 
from its associated PBS i?o,p is given by 


SINRp = 


Ppgo,pL (|-Ao_p|) 

h + p 


(4) 


where I 2 — Im ,2 + Is, 2 ^ Im ,2 — ^9£,mL {\X£^m\), 

Is ,2 = J2j&<ip\B,,pPp93,pLi\Xj,p\), go,p ~ exp(l) is the 

small-scale fading channel power gain between the typical 
user and its serving BS, gg^M ~ T {S, 1) and are the 

equivalent small-scale fading interfering channel power gain 
and distance between the typical user and MBS £, respectively, 
and gj^p and are the small-scale fading interfering 

channel power gain and distance between the typical user and 
BS j G ^p\Bo,p, respectively, and pj p ~ exp(l). 

We consider the non-colluding and passive eavesdropping 
that each eavesdropper intercepts the signal independently 
without any attacks. In this case, we only need to focus on 
the most malicious eavesdropper that has the largest receive 
SINR. When the MBS transmits the information messages 
to its intended user, the receive SINR at the most malicious 
eavesdropper is given by 


SINR^ = max 


^ha,eL{\Xo^e\) \ 

I A + lM,e + Is,e + j 


(5) 


where /lo e ^ exp(l) and \Xo,e\ are the equivalent small- 
scale fading channel power gain and distance between 
the eavesdropper and its targeted BS, respectively, Ia = 
P^heL (|2fo e|) with /le ^ r (N — 1,1) is the intra-cell inter¬ 
ference in the macro cell, Iyi,e = Z]re<i.M\o ^he^eL {\Xi^e\), 
^ r (S', 1) and \Xi^e\ are the equivalent small-scale 
fading interfering channel power gain and distance be¬ 
tween the eavesdropper and MBS £, respectively. Is e = 
Pp^l,P,eL{\Xj,P,e\), /ij.P.e ~ exp(l) and |Xj,P,e| 
are the small-scale fading interfering channel power gain 
and distance between the eavesdropper and BS j in the 
picocell, respectively. Similarly, when the PBS transmits the 
information messages to its intended user, the receive SINR 
at the most malicious eavesdropper is given by 


SINRp, = max 
eE‘l>E 


Ppgo,eL{\Xa^A) \ 

+ .^S,P.e + (5^ J ’ 


(6) 


where po e exp(l) and |Xo_e| are the equivalent small- 
scale fading channel power gain and distance between the 
eavesdropper and its targeted BS, respectively, Im.p.b = 

gi,e ~ T (N, 1) and \Xi^A are 
the equivalent small-scale fading interfering channel power 
gain and distance between the eavesdropper and MBS £, 
respectively, Is,p,e = Eje<i-p\o-^PSj.P.e^ d^i.P.el), 5i.P.e 






exp(l) and jX^P el are the small-scale fading interfering where 

channel power gain and distance between the eavesdropper 

and BS j in the picocell, respectively. A = / 




2'kXpPpI3{D^{x)) 


2 — OL2 


III. Secrecy Performance 


In an effort to assess the secrecy outage probability of 
a HetNets user, we first characterize the impact of massive / 

MIMO on the cell association probability. ( 


Jo \ 011 — 2 02 — 2 

exp TrAMa^^ — 

\ 1/02 


( 12 ) 


SPp 


a;“i/“2 is the minimum 


(N-S+1)Pm ) 

distance between the interfering picocell BS and the typical 
A. User Association Probability marcocell user. 

We first derive the PDF of the distance between a typical achievable ergodic rate of macrocell user is 

user and its serving base station in the following two lemmas, lower bounded by 

Lemma 1. The PDF of the distance |Ao,m| between a typical 
user and its serving MBS Bo,m is given by 


f\x,,M\ i^) = ‘^\^^ xexp <j - ttAmo;^ 


AIm 
— ttAp 


SPp 


{N-S+l)Pj 


M 


2/a2 


2ol\Iol2 


E{log2 (1 + SINRm)} > < = log2 (l + (f;{SINRm-^}) ' 

( 13 ) 

where 

-1 


( 7 ) 


In 0, aIm is the probability that a typical user is associated 
with the MBS 


AIm =27rAM J r exp | — TrAMf 
SPp 


— ttAp 


{N-S + l)Pi 


M 


2/a2 


Ur. (8) = 


E{SINRm-'} =(^^{N-S+1)P 

poo 

/ {E{l2} + S'^)x°‘^fxo.M\i^)dx. (14) 

Jo 

In (fT4l) . /ijVomI (^) 1^ given in 0. Using the Campbell’s 
theorem, the expectation of the aggregate interference from 
the MBSs and the BBSs is derived as 

2tt\mPmPx^-^^ 2TT\pPpl3{Df{x)f~"^ 


oi —2 


02—2 


Lemma 2. The PDF of the distance |Ao,fe| between a typical 
user and its serving PBS in Bo,p is given by 


( 15 ) 


27rA 


f\Xo,p\ix) =— —a;exp<^ - ttApo: 


Alp 

—ttAm 


Pm{N-S + 1) \ 2„,/„, 
PpS ' 


Lemma 4. For a typical user at a random distance |Ao_p| 
from its associated PBS, the achievable ergodic rate of the 
typical picocell user is derived as 


( 9 ) 


Rp = E {log2 (1 + SINRp)} = — 


Here, Alp is the probability that a typical user is associated 
with the PBS, which is given by 

Alp =27rAp J r exp— TrApr^ 

_^Am ]dr- (10) 

Note that Lemma 1 and Lemma 2 can be derived following 
the approach in ifT^ . 

B. Achievable Ergodic Rate 

In this subsection, we derive the achievable ergodic rate of 
the macrocell user and the picocell user. 

Lemma 3. For a typical user at a random distance |Ao,m| 
from its associated MBS, the lower bound on the achievable 
ergodic rate of the typical macrocell user is derived as 


In 2 


1 - EsinRp ( 7) 
1 + 7 


dy, 

( 16 ) 


where 


27rA 

FsinRp ( 7) = 1-/ exp {-27rAM4>3 (x) - 2 ttXp 

Jo 


Fi 1,1- 


9 

x 7 


02 — 2 
—nXpx^ — ttAm 

In dnll, we have 


-2 


, 2 - 


-7 


X' 


Oi2 


7^^ 


02 02 

Pm{N-S+ 1) X 
PpS 


Rp/3 

Q2 \ 2 j CL\ 


xdx. (17) 


^3 {x) =2+1 


1 — 2/ai, S,2 — 2 / 01 ,— 




SPp{Dl, (x)) 


1 + ^{N-S+1)^ 


,( 2t:Xm 


, ( 11 ) 


7PMx"-(i9^ {x)f 
SPp (ai - 2) 

^ yPMX°‘'^ 




k J oi 


B - 


RPp(+p {x)y 


k=2 

fc — 2/ai, 1 — 5 


7-PMa:“ 

SPp 


2/0 


7?M = log2 


( 18 ) 

























where (x) = sPp''^ ^ minimum 

distance between the interfering macrocell BS and the typical 
picocell user, B(-]-,-)is the incomplete beta function 
8.391], and 2 F 1 [•,•,•] is the Gauss hypergeometric function 
m 9.142J. 


Proof: The CDF of SINRp is expressed as 

7 {h + S'^) 


r 

FsiNRp (7) = / 

Jo 


Pr 


9o,p < 


Ppf3x~ 


= 1 - 


exp< - 


75^3 


PpP 


Fin 


"fX 


Pppp 


f\Xo,p\ {x)dx 

f\Xn,p\ {x)dx 

(19) 


To solve the laplace transform of the aggregate interfer¬ 
ence from macrocell BSs and picocell BS, we first uti- 
(^) = (^) (^) • The laplace 

transform of /m ,2 is given by 


(^) 
= ®/m,2 




r—^—j/l 




S ) 




where (a) follows from probability generating functional 
(PGFL) of PPP il and the Cartesian to polar coordinates 
transformation. The Laplace transform of Ip 2 is given by 


C/p, 2 (s) 



( 21 ) 


Substituting (l20l i and (1211 1 into ( fT9] l, we finally derive (fTTI i. ■ 


C. Secrecy Outage Probability 

Secrecy outage probability is the principle performance 
metric in the passive eavesdropping scenario. The secrecy 
outage is declared when the instantaneous secrecy rate is less 
than the targeted secrecy rate Rg ca. 

Theorem 1. For a typical user associated with the MBS, the 
upper bound on the secrecy outage probability of this typical 
user is given by 

P^ (Rs) =Pr {i?M - log 2 (1 + SINR“) < Rg} 

=1-Fsinrm (22) 

where i?M is the lower bound of the ergodic rate of the 
macrocell user in ca, Rg is the targeted secrecy rate, and the 


CDF of the receive SINK at the most malicious eavesdropper 
is derived as 


l^siNR^. ( 7 ) = exp |-27rAE y exp |-7S'(5^a;“i (^Pm) ^ 

- 27rAM (fc - 2/ai) P {-k + 2/ai + S) 


k^l 


aiTiS) 


27r^Ap / 1 

- - — (jSx^^PpiPM) j C'sc[27r/a2]| 

( 7 -f . (23) 

Theorem 2. For a typical user associated with the PBS, the 
secrecy outage probability of this typical user is derived as 


PL {Rs) = Pr {Pp - log 2 (1 + SINRP ) < Rg} 

= _iy (24) 


where Pp is the achievable ergodic rate of the picocell user in 
Cli, and the CDF of the receive SINK at the most malicious 
eavesdropper is given by 

IFsinrp ( 7 ) = exp |-27rAE J exp (/3Pp)”^ 

- 27rAM y Ti-k + 2/ai + S)r{k-2/ai) 

^ J air(S') 

^2a2/ai _ [27r/a2] . (25) 


The results in Theorem 1 and Theorem 2 can be derived 
following the similar approach in the proof for Lemma 4. 

The secrecy outage probability of the HetNets user is given 
by 


Pout {Rs) = Pit {Rs) .4m + pL {Rs) Alp, (26) 


where AIm and Alp are the user cell association probability in 
the macrocell and the picocell, which are derived in ([ 8 ]) and 

(O. 


IV. Numerical Examples 

In this section, we evaluate the achievable ergodic rate 
and the secrecy outage probability of the considered mas¬ 
sive MIMO HetNets based on the analytical results derived 
in Section III and Monte Carlo simulation. We consider a 
downlink HetNets in a circular region with radius 100m. 
In all simulations, we assume that the network operates at 
the carrier frequencey IGHz, the bandwidth is lOMHz, the 
transmit power of the MBS is Pm = 46 dBm, the transmit 
power of the PBS is Pp = 37 dBm, the path loss exponent 
of macrocell is ai = 3.5, the path loss exponent of picocell 
is a 2 = 4, the density of MBSs is Am = 10“^, the density of 
eavesdroppers is Ae = 10 “^, the users simultaneously served 
by each MBS is S' = 10, and the thermal noise is = —90 
dBm. Both figures show that the analytical plots have a good 
match with the simulation plots. 

Fig. [T] plots the ergodic rate of the marcocell user and the 
picocell user versus the number of antennas at each MBS N 



















Fig. 1. Achievable ergodic rate versus the number of antennas at each MBS 


using (fTTT l and ( fT6b . It is shown that the achievable ergodic rate 
improves with increasing N, due to the large array gain. This 
indicates that massive MIMO MBS carries more data traffic. 
Interestingly, increasing the density of BBSs, the achievable 
ergodic rates of the marcocell user and the picocell user 
degrade. This is due to the dominant impact of increased 
intercell interference brought by the BBSs. 

Fig Elplots the achievable secrecy outage probability versus 
the density of the BBSs. We set the number of antennas at 
each MBS as N — 200, and define the targeted secrecy rate 
at the marcocell user as Rg = pRu, and the targeted secrecy 
rate at the picocell user as Rg = pRp. It is assumed that 
p = 0.5. We see that the secrecy outage probability of the 
picocell user decreases with increasing Ap, due to the fact 
that more interference results in lowering SINRp in (HJl. 

More importantly, the secrecy outage probability of macro¬ 
cell user first degrades then improves with increasing Ap. The 
reason is that: 1) Increasing Ap increases the interference from 
BBSs, thus greatly degrades SINRm in (l3]i; 2) For very large 
density of BBSs, the interference from the interfering BBSs 
dominates SINR^ in (|5]l. Increasing Ap greatly decreases 
the distance between the interfering BBSs and the typical 
eavesdropper, and thus largely decreases SINR^. 

V. Conclusion 

In this paper, we took into account the physical layer 
security for the downlink massive MIMO HetNets with linear 
zero-forcing beamforming (ZFBF), where the non-colluding 
malicious eavesdroppers intercept the downlink user’s trans¬ 
mission. Our work demonstrated the importance of BS deploy¬ 
ment density and massive MIMO design on safeguarding the 
secure downlink transmission in HetNets. 
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Fig. 2. Secrecy outage probability versus the density of PBSs 
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